DevGuard: Open-source vulnerability management for the software supply chain Help Net Security